[PATCH] fanotify25: Add CVE reference and include it in CVE runfile

Martin Doucha <[email protected]>
Newsgroups gmane.linux.ltp
Message-ID <[email protected]>
The kernel bug tested by fanotify25 is assigned CVE 2023-52879. Add
CVE reference and git reference for the kernel fix. Also add the test
to the CVE runfile.

Signed-off-by: Martin Doucha <[email protected]>
---
 runtest/cve                                     |  1 +
 testcases/kernel/syscalls/fanotify/fanotify25.c | 16 +++++++++++++++-
 2 files changed, 16 insertions(+), 1 deletion(-)

diff --git a/runtest/cve b/runtest/cve
index ca9994868..27e12e0c1 100644
--- a/runtest/cve
+++ b/runtest/cve
@@ -87,6 +87,7 @@ cve-2022-23222 bpf_prog07
 cve-2023-1829 tcindex01
 cve-2023-0461 setsockopt10
 cve-2023-31248 nft02
+cve-2023-52879 fanotify25
 # Tests below may cause kernel memory leak
 cve-2020-25704 perf_event_open03
 cve-2022-0185 fsconfig03
diff --git a/testcases/kernel/syscalls/fanotify/fanotify25.c b/testcases/kernel/syscalls/fanotify/fanotify25.c
index d2d3f6e6a..6b22f65b3 100644
--- a/testcases/kernel/syscalls/fanotify/fanotify25.c
+++ b/testcases/kernel/syscalls/fanotify/fanotify25.c
@@ -6,8 +6,17 @@
  */
 
 /*\
+ * CVE-2023-52879
+ *
  * Verify that :manpage:`fanotify(7)` monitoring can be applied to the tracing
- * filesystem and write events will be correctly delivered.
+ * filesystem and write events will be correctly delivered. NULL pointer
+ * dereference fixed in:
+ *
+ * commit bb32500fb9b78215e4ef6ee8b4345c5f5d7eafb4
+ * Author: Steven Rostedt (Google) <[email protected]>
+ * Date:   Tue Oct 31 12:24:53 2023 -0400
+ *
+ * tracing: Have trace_event_file have ref counters
  */
 
 #define _GNU_SOURCE
@@ -118,6 +127,11 @@ static struct tst_test test = {
 	.needs_kconfigs = (const char *[]) {
 		"CONFIG_TRACING",
 		NULL
+	},
+	.tags = (const struct tst_tag[]) {
+		{"linux-git", "bb32500fb9b7"},
+		{"CVE", "2023-52879"},
+		{}
 	}
 };
 
-- 
2.54.0


-- 
Mailing list info: https://lists.linux.it/listinfo/ltp
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.